Comments on: TippingPoint’s Zero Day Initiative http://spiresecurity.com/?p=575 Risk and Cybersecurity Analysis Wed, 21 Aug 2013 23:28:51 +0000 hourly 1 http://wordpress.org/?v=3.5.1 By: scalefree http://spiresecurity.com/?p=575&cpage=1#comment-865 scalefree Mon, 15 Aug 2005 23:45:16 +0000 http://spiresecurity.com/blog/?p=575#comment-865 Hell, it’s way older than that. ISS founder Chris Klaus used to come on IRC & beg for warez. He was offering at least $1K for a good vuln, that was at least 10 years ago.

Tim

]]> By: Pete http://spiresecurity.com/?p=575&cpage=1#comment-864 Pete Fri, 29 Jul 2005 16:44:24 +0000 http://spiresecurity.com/blog/?p=575#comment-864 I agree. My biggest reason for clarifying my points is simply that a few reporters had asked me about it.

]]> By: Chandler Howell http://spiresecurity.com/?p=575&cpage=1#comment-863 Chandler Howell Fri, 29 Jul 2005 16:26:54 +0000 http://spiresecurity.com/blog/?p=575#comment-863 This is really nothing new. iDEFENSE has been buying vulnerabilities from the underground for at least two or three years now.

All this seems to has done is created a price war for access to undisclosed vulnerabilities (from http://www.computerweekly.com/Articles/2005/07/27/211105/iDefensedoublesbugbounty.htm ):
Wednesday 27 July 2005

Security firm iDefense has doubled the cash rewards on offer to researchers who spot software bugs after a rival company started its own bounty payment scheme.

]]>